技能详情（站内镜像，无评论）
作者：Expanso @aronchick
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 681 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aronchick/expanso-email-triage
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's functionality (email triage + calendar sync) is coherent, but there are important mismatches and privacy/network exposure risks you should understand before installing.
目的
The skill's declared purpose (email triage with calendar integration) matches the included pipelines and skill.yaml. However, registry-level metadata reported no required environment variables or primary credential while the included skill.yaml and pipeline files clearly require OPENAI_API_KEY and optionally GMAIL_TOKEN / OUTLOOK_TOKEN / IMAP credentials / CALENDAR_API_KEY. SKILL.md also requires the expanso-edge binary. The mismatch between r…
说明范围
Runtime instructions and pipelines will send email content to an LLM (openai_chat_completion using OPENAI_API_KEY) — i.e., email bodies are transmitted to OpenAI unless you switch to a local backend. The MCP pipeline starts an HTTP server bound to 0.0.0.0:${PORT} which could accept remote requests; if you run this on a host reachable from untrusted networks it could be triggered remotely and cause processing of data and LLM calls. The SKILL.md…
安装机制
No install spec is provided and the skill is instruction-only (no code to download/execute). That reduces supply-chain risk because nothing will be automatically fetched or written during install — you run the pipelines explicitly via the expanso-edge binary.
证书
The skill requires an OpenAI API key (OPENAI_API_KEY is marked required in skill.yaml) and optionally email/calendar credentials (GMAIL_TOKEN, OUTLOOK_TOKEN, IMAP_*, CALENDAR_API_KEY). Those credentials are proportionate to the stated functionality, but the registry metadata did not declare these environment requirements (registry showed none), which is a discrepancy. Also note that while credentials/ OAuth tokens are claimed to 'stay local', …
持久
always:false and no install hook — the skill does not request persistent platform-level privileges. However, running the MCP pipeline effectively publishes a long-lived HTTP endpoint on the host; that is not a platform privilege, but it is a runtime exposure you should treat like a networked service (bind address, firewall, authentication).
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Expanso email-triage」。简介：AI-powered email triage that syncs with your calendar and drafts responses for …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aronchick/expanso-email-triage/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# email-triage
AI-powered email triage with calendar sync and response drafting
## Requirements
- Expanso Edge installed (`expanso-edge` binary in PATH)
- Install via: `clawhub install expanso-edge`
## Usage
### CLI Pipeline
```bash
# Run standalone
echo '<input>' | expanso-edge run pipeline-cli.yaml
```
### MCP Pipeline
```bash
# Start as MCP server
expanso-edge run pipeline-mcp.yaml
```
### Deploy to Expanso Cloud
```bash
expanso-cli job deploy https://skills.expanso.io/email-triage/pipeline-cli.yaml
```
## Files
| File | Purpose |
|------|---------|
| `skill.yaml` | Skill metadata (inputs, outputs, credentials) |
| `pipeline-cli.yaml` | Standalone CLI pipeline |
| `pipeline-mcp.yaml` | MCP server pipeline |